Product · facelessuser

pymdown-extensions

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2023-32309 Public exploit

Arbitrary file inclusion with the pymdowm-snippets extension

PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. In affected versions an arbitrary file read is possible when using include file syntax. By using the syntax `--8<--"/etc/passwd"` or `--8<--"/proc/self/environ"` the content…

facelessuser pymdown-extensions pymdown-extensions pymdown-extensions Debian Ubuntu PyPI

May 15, 2023